-

CVE-2026-63963

usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers

Properly validate the count passed from a device when calling
svdm_consume_identity() or svdm_consume_identity_sop_prime() as the
device-controlled value could index off of the static arrays, which
could leak data.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f0690a25a140b853b1842fa80faf828601bb47e8
Version < 569f7971542eb10025d8a0989b83f28a29d8ba20
Status affected
Version f0690a25a140b853b1842fa80faf828601bb47e8
Version < f9d787fbe83127105e42088cca40e5118db0d810
Status affected
Version f0690a25a140b853b1842fa80faf828601bb47e8
Version < ed8649f3822e211d025bcab5158af6f8a38c8705
Status affected
Version f0690a25a140b853b1842fa80faf828601bb47e8
Version < 8fbc349e8383125dd2d8de1c1e926279d398ab17
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.12
Status affected
Version 0
Version < 4.12
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/569f7971542eb10025d8a0989b83f28a29d8ba20
https://git.kernel.org/stable/c/f9d787fbe83127105e42088cca40e5118db0d810
https://git.kernel.org/stable/c/ed8649f3822e211d025bcab5158af6f8a38c8705
https://git.kernel.org/stable/c/8fbc349e8383125dd2d8de1c1e926279d398ab17